Code Execution Vulnerability of ActiveX components of F-Secure

Release date:
Updated on: 2013-04-26

Affected Systems:
F-Secure Anti-Virus Linux Server Security 9.x
F-Secure Anti-Virus for Windows Servers 9.x
F-Secure Anti-Virus for Citrix Servers 9.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 59443
 
F-Secure, formerly known as Data Fellows, is a famous European information security vendor headquartered in Helsinki, Finland.
 
An error exists in the DLL components related to ActiveX controls bound to multiple F-Secure Server products. When using IE browser, any connection to the ODBC driver is allowed. If the local server uses local authentication, attackers can exploit this vulnerability to execute arbitrary code.
 
<* Source: Andrea Micalizzi

Link: http://secunia.com/advisories/53162/
Http://www.f-secure.com/en/web/labs_global/fsc-2013-1
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
F-Secure
--------
F-Secure has released a Security Bulletin (fsc-2013-1) and corresponding patches for this:
Fsc-2013-1: Remote code execution vulnerability in DLL component
Link: http://www.f-secure.com/en/web/labs_global/fsc-2013-1
 
Patch download:
 
F-Secure Anti-Virus for Microsoft Exchange Server 9.00-9.10 ftp://ftp.f-secure.com/support/hotfix/fsav-mse/FSAVMSE910-HF02.fsfix
 
Ftp://ftp.f-secure.com/support/hotfix/fsav-mse/FSAVMSE910-HF02.jar
F-Secure Anti-Virus for Windows Servers 9.00 ftp://ftp.f-secure.com/support/hotfix/fsav-server/FSAVSRV900_HF09.fsfix
 
Ftp://ftp.f-secure.com/support/hotfix/fsav-server/FSAVSRV900_HF09.jar
F-Secure Anti-Virus for Citrix Servers 9.00 ftp://ftp.f-secure.com/support/hotfix/fsav-server/FSAVSRV900_HF09.fsfix
 
Ftp://ftp.f-secure.com/support/hotfix/fsav-server/FSAVSRV900_HF09.jar
F-Secure Email and Server Security 9.20 ftp://ftp.f-secure.com/support/hotfix/fsss/FSESS920-HF01.fsfix
 
Ftp://ftp.f-secure.com/support/hotfix/fsss/FSESS920-HF01.jar
F-Secure Server Security 9.20 ftp://ftp.f-secure.com/support/hotfix/fsss/FSSS920-HF01.fsfix

Ftp://ftp.f-secure.com/support/hotfix/fsss/FSSS920-HF01.jar